Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/f-vJ5MpAcW6hkwSW6beC4BrtOyI.roa
File: f-vJ5MpAcW6hkwSW6beC4BrtOyI.roa (raw, json)
Hash identifier: /qgSWMc5ArY8UKN8yYu2uZGsqAWrJTqfBasP9RzwX5E=
Subject key identifier: 7F:EB:C9:E4:CA:40:71:6E:A1:93:04:96:E9:B7:82:E0:1A:ED:3B:22
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01856F1DD02ABC0F20166F3F44F654BC14C2
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/f-vJ5MpAcW6hkwSW6beC4BrtOyI.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212667
IP address blocks: 85.235.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:d0:2a:bc:0f:20:16:6f:3f:44:f6:54:bc:14:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7febc9e4ca40716ea1930496e9b782e01aed3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:50:79:54:50:c8:c2:1d:09:e3:26:2c:1d:
7e:56:23:fc:f3:6b:ac:be:89:96:d5:4d:0c:be:06:
29:ae:01:6b:f7:65:3f:43:ab:56:b9:c1:c2:25:fc:
07:2c:f5:41:ee:6c:c0:07:f9:a5:35:77:10:e6:44:
24:4e:39:e9:be:66:fa:43:3c:0f:4e:da:f0:70:3e:
f3:bb:85:00:9e:ab:13:49:2d:c6:0a:d9:18:60:69:
ac:86:c1:b1:ac:b7:69:d3:a0:55:7d:a8:db:aa:14:
d0:62:e7:a7:17:21:70:b1:e0:f3:f1:98:8f:4c:d1:
a2:b1:6b:85:59:1a:7c:12:20:82:71:21:48:58:f3:
fc:25:60:cf:67:b5:58:6d:e3:88:21:bb:29:42:01:
1a:df:50:ac:73:48:18:b0:c3:e1:c9:12:51:6f:a0:
2c:8a:c3:35:e5:22:a6:3f:cd:51:3b:9d:fe:a8:b1:
b7:b4:bf:8b:7c:b5:96:d4:85:50:d0:9c:01:a3:59:
ab:26:97:de:ea:6b:2c:4c:ec:be:91:87:81:5a:aa:
c4:4c:0f:fb:a2:7a:34:f0:83:d9:d0:1d:7c:74:d2:
38:76:b9:f6:47:a8:15:4b:cf:39:a3:30:53:e6:a0:
b4:a6:de:0d:66:a0:fd:71:1b:76:8d:8d:38:e9:bf:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EB:C9:E4:CA:40:71:6E:A1:93:04:96:E9:B7:82:E0:1A:ED:3B:22
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/f-vJ5MpAcW6hkwSW6beC4BrtOyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.235.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e4:65:67:f6:21:64:31:7a:ea:e6:4a:f8:39:54:a8:d0:fd:
62:31:75:c9:4e:82:c3:2e:8d:39:28:e8:f7:7b:fd:f0:2b:eb:
ad:17:a6:e2:90:59:61:be:94:ca:25:ad:ad:d2:fd:39:4d:f4:
c7:e4:4d:dc:6a:9b:43:f9:33:25:28:83:17:99:6e:12:27:6e:
03:a2:01:23:7c:d3:27:b2:b8:6b:82:60:6c:9c:29:dd:47:6e:
3e:ca:72:7a:e0:86:72:b5:5f:8f:d5:c2:e5:a2:af:10:c2:09:
ef:0e:b3:be:27:e0:0f:95:e0:bc:9f:ad:81:2c:7c:0f:4e:04:
94:5d:7a:d9:5d:29:c9:83:c2:ec:89:0e:95:75:48:c1:04:fc:
70:98:3b:d4:15:7a:4b:39:f1:f2:17:c5:7d:59:4b:ef:c0:e9:
a0:31:d7:42:a0:ed:3d:c1:c4:f5:b3:19:22:6e:ab:d7:70:61:
25:d5:33:3b:97:a0:6e:c2:03:5d:95:e3:22:33:88:ff:51:43:
c3:1c:82:3c:d6:59:44:5e:0e:e3:4d:0a:70:2d:54:ad:82:d1:
1c:7f:0d:97:2b:34:77:51:6d:80:3e:4b:99:12:58:3b:44:68:
31:c5:ad:1c:c5:c6:54:07:e1:28:e0:a4:50:fc:8f:9a:b3:3c:
f1:18:7b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:25 2024 by rpki-client on console-ams.rpki-client.org